What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Start with the settings that control access: replace the default administrator username and password (if the router allows it), change the Wi‑Fi password, and rename the network so it does not identify you. Set wireless security to WPA3 Personal; use WPA2 Personal when WPA3 is unavailable. Then install router software updates, disable remote management, WPS, and UPnP unless you need them, confirm the firewall is enabled, and create a guest network with separate credentials. If an older router still cannot offer WPA2 or WPA3 after updating, replace it.
The correct order for securing a router
Changing settings in the right order prevents you from leaving an easy entry point while working on another control. Use this sequence for a home router or an ISP-provided gateway. Menus differ by manufacturer, firmware version, and internet provider, so treat the labels below as examples rather than a universal path.
As an Amazon Associate I earn from qualifying purchases.
- Change the administrator credentials. Replace the default administrator password and, where supported, the default administrator username. Use a unique password that does not contain your name, address, Wi‑Fi name, or router brand.
- Change the Wi‑Fi credentials and network name. Give the wireless network a new, non-identifying name (SSID) and a separate, unique passphrase. The Wi‑Fi password and administrator password must not be the same.
- Select WPA3 Personal. If the router does not offer WPA3, select WPA2 Personal. Do not leave the network using WEP or WPA.
- Install available router software updates. Check the manufacturer’s support page or the router’s update screen. For an ISP-supplied device, ask whether updates are installed automatically.
- Turn off unneeded remote management, WPS, and UPnP. Keep a feature only when you understand why a device or service requires it.
- Confirm the firewall is on and create a guest network. Use a different guest password and keep visitors and untrusted devices off the primary network.
This priority follows guidance from the Federal Trade Commission (FTC) and the Cybersecurity and Infrastructure Security Agency (CISA). It addresses both direct access to the router and access to the devices behind it.
Why the two passwords are separate security controls
The Wi‑Fi password controls network membership
Anyone who knows the wireless password can attempt to join the network. A default key printed on a router label or reused across a product line is therefore a poor long-term credential. Create a new passphrase that is difficult to guess and do not reuse it for email, shopping, or other accounts. Share the primary password only with people and devices that need access.
#1 Best Overall
The administrator password controls the configuration
The administrator login opens the control panel where wireless security, firmware, port exposure, and other protections are changed. Leaving this credential at its factory value can let someone who reaches the management interface alter the router even if the Wi‑Fi password is strong. Change the administrator username too if the interface permits it; many devices allow only the password to be changed.
Use a non-identifying SSID
Rename the wireless network so it does not reveal your surname, street address, apartment number, or the router’s model. CISA guidance also recommends changing the default wireless system ID and password. An SSID is not a secret, but removing personal information makes it less useful to someone looking at nearby networks.
Choose WPA3 or WPA2, and remove legacy encryption
| Wireless security option | What to do | Reason |
|---|---|---|
| WPA3 Personal | Choose it when the router offers it and your devices support it. | The FTC describes WPA3 as the newer and best encryption option in its December 2022 guidance. |
| WPA2 Personal | Use it when WPA3 is unavailable. | WPA2 remains an acceptable baseline in FTC and CISA guidance. |
| WPA | Do not use it. | CISA and the FTC identify legacy WPA as outdated or insecure. |
| WEP | Do not use it. | WEP is obsolete and does not provide current wireless protection. |
Look under a menu such as Wireless, Wi‑Fi, or Security. Select the setting labeled “Personal” or “PSK” rather than an enterprise authentication mode intended for managed organizational networks. Save the change and reconnect each device with the new password.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteIf a device will not connect after you select WPA3, first check for updates for that device and the router. If compatibility remains a problem, WPA2 Personal is the supported fallback. Do not solve a compatibility issue by reverting the entire network to WEP or WPA.
Rank #2
Update the router’s software before relying on other settings
Firmware updates can add security fixes and, on some models, add newer wireless-security choices. Open the router’s administration page and look for Firmware Update, Software Update, Administration, or System. If the router does not provide an update button, use the manufacturer’s model-specific support instructions and verify the exact hardware revision before downloading anything.
ISP-supplied gateways may have a different process. Some receive updates automatically, while others expose only a limited set of controls. Ask the ISP whether updates are automatic and whether the gateway is still supported. Record the router model and current firmware version before changing settings so support staff can identify the device if a problem occurs.
After an update, sign in again and verify that your chosen WPA mode, passwords, firewall, guest network, and disabled features still have the intended values. An update can reboot the router or restore a setting, and a successful installation does not by itself prove that every security option remains enabled.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallDisable convenience features you do not need
| Feature | Security reason to disable it | Convenience you may lose |
|---|---|---|
| Remote management | It exposes the administration function beyond the local network. The FTC advises turning it off when it is not needed. | Managing the router while away from home may no longer work. |
| WPS | It provides an additional setup method that can weaken the network’s security. Disable it unless you have a specific, trusted need. | Some devices can no longer join through a WPS button or PIN. |
| UPnP | It lets devices request automatic network changes. The FTC recommends disabling it when unnecessary. | Some applications may stop configuring themselves automatically and require their own supported setup method. |
These options are commonly found under Advanced, Administration, Remote Access, or Network Settings. A feature that is disabled can be re-enabled temporarily if a documented setup requires it; turn it off again when the task is complete. Do not disable a control blindly on a managed business connection—confirm the requirement with the administrator or ISP.
Turn on the firewall and isolate guests
Verify the router firewall
Find a page labeled Firewall, Security, or WAN protection and confirm the firewall is enabled. On many consumer routers it is on by default, but checking matters after a reset, firmware update, or configuration import. If the router has separate IPv4 and IPv6 firewall switches, follow the model’s instructions rather than assuming one switch protects both protocols.
Create a guest network
Enable the guest Wi‑Fi and give it a different name and password from the primary network. This lets visitors connect without receiving the main credential. The FTC notes that a guest network can keep a guest device carrying malware away from the primary network. Use the option that prevents guest clients from reaching local devices when the router provides that choice.
Put devices you do not fully trust on the guest network only if their required services still work there. A guest network can restrict access to printers, storage, or smart-home controllers; that separation is a security benefit, but it may change how those devices are discovered.
Free tools Windows power users keep installed
One-click scans. No signup required.
How to find settings on an unfamiliar router
There is no single menu path for every model. Start with the address, app, or login method printed in the router’s manual or supplied by the ISP. Then use this mapping:
Rank #4
- Administrator credentials: Administration, System, Account, or Management.
- Wi‑Fi name, password, and encryption: Wireless, Wi‑Fi, SSID, or Security.
- Firmware: Firmware Update, Software Update, or System Tools.
- Remote management: Remote Access, Administration, or WAN Management.
- WPS and UPnP: Advanced Wireless or Network Settings.
- Firewall and guest Wi‑Fi: Security, Firewall, or Guest Network.
Save one change at a time when possible. After each save, reconnect a phone or computer and confirm internet access. This makes it easier to identify the setting that caused a problem than changing everything simultaneously.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to do when a setting is missing or breaks a device
There is no WPA3 option
Install the latest firmware listed for the exact router model. If WPA3 still does not appear, use WPA2 Personal. If the router offers only WPA or WEP, it lacks the minimum current protection described by the FTC and CISA; plan to replace it rather than treating a password change as a complete fix.
An older device cannot reconnect
Forget the saved network on the device, restart its Wi‑Fi, and enter the new credentials manually. Check the device maker for a software update. If it supports WPA2 but not WPA3, WPA2 Personal is the compatibility choice. Do not downgrade the whole network to legacy WPA or WEP just to keep an unsupported device connected.
The ISP locks important controls
Ask the ISP which settings it manages, whether remote administration is required for support, and whether the gateway is still receiving updates. If the provider cannot supply WPA2 or WPA3 on the current hardware, request a supported replacement or use your own router that does.
You lose the administrator login
Use the model’s documented account-recovery or reset procedure. A factory reset erases custom settings, so have the ISP connection details and the new Wi‑Fi credentials ready before resetting. Reapply the priority list after the reset; default passwords and legacy encryption can return.
When replacing the router is justified
Replacement is not the first step for every old device. Update the firmware and check the exact model’s capabilities first. Replace the router when an update still leaves it unable to provide WPA2 Personal or WPA3 Personal, when the manufacturer or ISP no longer supports it, or when the device cannot receive security updates. Choose a model that explicitly supports WPA2 or WPA3 and has an update process you can use.
Do not infer security from a new-looking design or a high wireless speed. The relevant purchase requirement for this issue is supported encryption plus ongoing software support. Transfer the new administrator and Wi‑Fi credentials to your devices, then retire the old router rather than leaving it powered on with its previous settings.
A maintenance check after the initial setup
- Confirm the administrator username and password are no longer factory defaults.
- Confirm the Wi‑Fi password is unique and different from the administrator password.
- Check that the SSID does not identify your household or address.
- Verify WPA3 Personal or WPA2 Personal is selected on every active wireless network.
- Check for firmware updates and confirm whether the ISP installs them automatically.
- Verify remote management, WPS, and UPnP are off unless you have documented reasons to keep them.
- Confirm the firewall is enabled.
- Test the guest network with a separate password and verify that guest devices cannot reach primary-network devices when isolation is available.
These checks address the settings the FTC’s December 2022 home Wi‑Fi guidance and CISA wireless-security guidance identify as the foundation: strong, separate credentials; WPA2 or WPA3; current software; reduced remote and automatic exposure; a firewall; and network separation.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
